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In the Claims: 

Please cancel claims 15,16, 44, 45, 68, 69, 96, 97, 1 1 8, 1 1 9, 1 36, and 

137. 

Please amend claims 1,17, 21, 23, 25, 30, 46, 49, 50, 51, 56, 70, 74, 76, 
78, 83, 98, 100, 101, 102, 106, 120, 124, 125, 126, 138, 140, and 141, as follows: 

1 . (Once Amended) An enforcement architecture for digital rights 
management, wherein the architecture enforces rights in protected digital content, the 
architecture comprising: 

a content server for distributing the digital content; 

a license server for issuing at least one digital license 
corresponding to and separate from the digital content; and 

a computing device for receiving the distributed digital content and 
for receiving and storing any digital license corresponding to the digital content, the 
computing device having: 

a rendering application for rendering the digital content; and 
a Digital Rights Management (DRM) system for being 
invoked by the rendering application upon such rendering application attempting to 
render the digital content, the DRM system for determining whether a right to render the 
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digital content in the manner sought exists based on any digital license stored in the 
computing device and corresponding to the digital contend 

wherein the license server issues a digital license to the DRM 
system only if the license server trusts such DRM system to abide by the license, and 

wherein the content server distributes the digital content in an 
encrypted form, and wherein the DRM system includes a trusted black box for 
performing decryption and encryption functions for such DRM system. 



1 7. (Once Amended) The architecture of claim 1 , wherein the black 
box includes a unique public / private key pair for performing the decryption and 
encryption functions. 



21 . (Once Amended) The architecture of claim 1 , wherein the black 
box includes a version number. 



23. (Once Amended) The architecture of claim 1 , wherein the black 
box includes a certifying authority signature as provided by an approved certifying 
authority. 

25. (Once Amended) The architecture of claim 1 , wherein each 
digital license corresponding to the digital content includes a description of the rights 
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conferred by the license, and wherein the DRM system includes a trusted license 
evaluator for evaluating the rights description and allowing rendering of the digital 
content by the rendering application only if such rendering is in accordance with the 
rights description of the license. 



30. (Once Amended) A method for implementing digital rights 
management, wherein the method enforces rights in protected digital content, the 
method comprising: 

distributing the digital content from a content server to a computing 

device of a user; 

receiving the distributed digital content at the computing device; 
attempting to render the digital content by way of a rendering 

application; 

invoking, by the rendering application, a Digital Rights 
Management (DRM) system upon such rendering application attempting to render the 
digital content; 

determining, by the DRM system, whether a right to render the 
digital content in the manner sought exists based on any digital license stored in the 
computing device and corresponding to the digital content; and 

if the right does not exist: 

requesting from a license server a digital license that 

-4- 



DOCKET NO.: MSFT-0035 / 127334.1 PATENT 

provides such right and that corresponds to and is separate from the digital content; 

issuing, by the license server, the digital license to the DRM 

system; 

receiving, by the computing device, the issued digital license 
corresponding to the digital content from the license server; and 

storing the received digital license on the computing device, 

wherein the issuing step comprises issuing, by the license server, 
the.digital license to the DRM system only if the license server trusts such DRM system 
to abide by the license, and 

wherein the distributing step comprises distributing, by the content 
server, the digital content in an encrypted form, and further comprising employing a 
trusted black box in the DRM system to perform decryption and encryption functions for 
such DRM system. 



46. (Once Amended) The method of claim 30, wherein the black box 
includes a public / private key pair, and wherein the requesting a digital license step 
comprises including in the request the black box public key, and further comprising 
encrypting, by the license server, at least a portion of the digital license according to the 
black box public key prior to issuance of such license, thereby binding such license to 
such black box. 
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49. (Once Amended) The method of claim 30, wherein the black box 
includes a version number, and wherein the requesting a digital license step comprises 
including in the request the version number of the black box, and further comprising: 

determining, by the license server, prior to issuance of the license 
whether the version number of the black box is acceptable; and 

upon determining that the version number of the black box is not 
acceptable, the license server refusing to issue the license until the black box is 
updated, the architecture further comprising a black box server for providing an updated 
black box to the DRM system. 

50. (Once Amended) The method of claim 30, wherein the black box 
includes a certifying authority signature as provided by an approved certifying authority, 
and wherein the requesting a digital license step comprises including the certifying 
authority signature, the license server determining prior to issuance of the license 
whether the certifying authority signature is valid. 

51 . (Once Amended) The method of claim 30, wherein the issuing 
the digital license step comprises including with the digital license a description of the 
rights conferred by the license, and further comprising: 




• 
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evaluating, by a trusted license evaluator of the DRM system, the 
rights description; and 

allowing rendering of the digital content by the rendering 
application only if such rendering is in accordance with the rights description of the 
license. 



management, wherein the architecture enforces rights in protected digital content, the 
architecture comprising: 

a content server communicatively coupled to a network for 
distributing the digital content over the network; 

a license server for issuing at least one digital license 
corresponding to and separate from the digital content, the license server being 
communicatively coupled to the network for issuing the at least one digital license over 
the network; and 



56. (Once Amended) An enforcement architecture for digital rights 



a computing device communicatively coupled to the network for 



receiving the distributed digital content and for receiving any digital license 



corresponding to the digital content, the computing device also having: 



a memory for storing any digital license corresponding to the 



digital content; 



a rendering application for attempting to render the digital 
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content; and 

a Digital Rights Management (DRM) system for being 
invoked by the rendering application upon such rendering application attempting to 
render the digital content, the DRM system for determining whether a right to render the 
digital content in the manner sought exists based on any digital license stored in the 
computing device and corresponding to the digital content; 

wherein the license server issues a digital license to a DRM system 
only if the license server trusts such DRM system to abide by the license, and 

wherein the content server distributes the digital content in an 
encrypted form, and wherein the DRM system includes a trusted black box for 
performing decryption and encryption functions for such DRM system. 

70. (Once Amended) The architecture of claim 56, wherein the black 
box includes a unique public / private key pair for performing the decryption and 
encryption functions. 

74. (Once Amended) The architecture of claim 56, wherein the black 
box includes a version number. 

76. (Once Amended) The architecture of claim 56, wherein the black 
box includes a certifying authority signature as provided by an approved certifying 

-8- 



DOCKET NO.: MSFT-0035 / 127334.1 PATENT 

authority. 



78. (Once Amended) The architecture of claim 56, wherein each 
digital license corresponding to the digital content includes a description of the rights 
conferred by the license, and wherein the DRM system includes a trusted license 
evaluator for evaluating the rights description and allowing rendering of the digital 
content by the rendering application only if such rendering is in accordance with the 
rights description of the license. 

83. (Once Amended) An enforcement architecture for digital rights 
management, wherein the architecture enforces rights in protected digital content, the 
architecture comprising: 

an authoring tool for authoring the digital content in a form 
amenable to the architecture; 

a content server for receiving the digital content from the authoring 
tool and distributing the digital content; and 

a license server for issuing at least one digital license 
corresponding to and separate from the digital content, wherein a computing device 
receives the distributed digital content and receives and stores any digital license 
corresponding to the digital content, the computing device having a rendering 
application for rendering the digital content; and a Digital Rights Management (DRM) 
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system for being invoked by the rendering application upon such rendering application 
attempting to render the digital content, the DRM system for determining whether a right 
to render the digital content in the manner sought exists based on any digital license 
stored in the computing device and corresponding to the digital content, 

wherein the license server issues a digital license to a DRM system 
only if the license server trusts such DRM system to abide by the license, and 

wherein the content server distributes the digital content in an 
encrypted form, wherein the DRM system includes a trusted black box for performing 
decryption and encryption functions for such DRM system, wherein the black box 
includes a unique public / private key pair for performing the decryption and encryption 
functions, and wherein the license server issues each digital license in response to a 
license request from the DRM system, the license request including the black box 
public key, the license server encrypting at least a portion of the digital license 
according to the black box public key prior to issuance of such license, thereby binding 
such license to such black box. 

98. (Once Amended) The architecture of claim 83, wherein the 
content server distributes the digital content in an encrypted form, wherein each digital 
license corresponding to the digital content includes a decryption key that decrypts the 
encrypted digital content, and wherein the license server encrypts the decryption key in 
the license according to the black box public key. 
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100. (Once Amended) The architecture of claim 83, wherein the black 
box includes a version number, and wherein the license server issues each digital 
license in response to a license request from the DRM system, the license request 
including the version number of the black box, the license server determining prior to 
issuance of the license whether the version number of the black box is acceptable, the 
license server upon determining that the version number of the black box is not 
acceptable refusing to issue the license until the black box is updated, the architecture 
further comprising a black box server for providing an updated black box to the DRM 
system. 

1 01 . (Once Amended) The architecture of claim 83, wherein the black 
box includes a certifying authority signature as provided by an approved certifying 
authority, and wherein the license server issues each digital license in response to a 
license request from the DRM system, the license request including the certifying 
authority signature, the license server determining prior to issuance of the license 
whether the certifying authority signature is valid. 

1 02. (Once Amended) The architecture of claim 83, wherein each 
digital license corresponding to the digital content includes a description of the rights 
conferred by the license, and wherein the DRM system includes a trusted license 
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evaluator for evaluating the rights description and allowing rendering of the digital 
content by the rendering application only if such rendering is in accordance with the 
rights description of the license. 

106. (Once Amended) A computer-readable medium having stored 
thereon computer-executable instructions for implementing a method for enforcing 
rights in protected digital content, the method comprising: 

receiving digital content distributed from a content server; 

receiving and storing at least one digital license issued from a 
license server, the at least one digital license corresponding to and separate from the 
digital content; 

attempting to render the digital content on a rendering application 
in a particular manner; 

invoking a Digital Rights Management (DRM) system upon such 
rendering application attempting to render the digital content; and 

determining, by the DRM system, whether a right to render the 
digital content in the manner sought exists based on the at least one stored digital 
license corresponding to the digital content^ 

wherein the method comprises receiving and storing at least one 
digital license only if the license server trusts the DRM system to abide by the license, 
and 

-12- 



DOCKET NO.: MSFT-0035 / 127334.1 PATENT 

wherein the method comprises receiving the digital content in an 

encrypted form, and further comprises performing decryption of the digital content by 
way of a trusted black box of the DRM system. 

1 20. (Once Amended) The medium of claim 1 06 wherein the method 
comprises receiving the digital content in an encrypted form, and further comprises 
performing decryption of the digital content by way of a trusted black box of the DRM 
system, the black box including a unique public / private key pair for performing the 
decryption. 

1 24. (Once Amended) The medium of claim 1 06 wherein the method 
comprises receiving and storing at least one digital license in response to a license 
request from the DRM system, the license request including a version number of the 
black box, the license server determining prior to issuance of the license whether the 
version number of the black box is acceptable. 

1 25. (Once Amended) The medium of claim 1 06 wherein the method 
comprises receiving and storing at least one digital license including a description of the 
rights conferred by the license, the method further comprising evaluating by a trusted 
license evaluator of the DRM system the rights description and allowing rendering of 
the digital content by the rendering application only if such rendering is in accordance 
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1 26. (Once Amended) A method for implementing digital rights 
management, wherein the method enforces rights in protected digital content, the 
method comprising: 

receiving the distributed digital content at the computing device; 
attempting to render the digital content by way of a rendering 

application; 

invoking, by the rendering application, a Digital Rights 
Management (DRM) system upon such rendering application attempting to render the 
digital content; 

determining, by the DRM system, whether a right to render the 
digital content in the manner sought exists based on any digital license stored in the 
computing device and corresponding to the digital content; and 

if the right does not exist: 

requesting from a license server a digital license that 
provides such right and that corresponds to and is separate from the digital content; 

receiving, by the computing device, the issued digital license 
corresponding to the digital content from the license server; and 

storing the received digital license on the computing device^ 
the method further comprising employing a trusted black box in the 
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DRM system to perform decryption and encryption functions for such DRM system, 
wherein the black box includes a public / private key pair, and 
wherein requesting the digital license comprises including in the request the black box 
public key, wherein the license server encrypts at least a portion of the digital license 
according to the black box public key prior to issuance of such license, thereby binding 
such license to such black box. 

1 38. (Once Amended) The method of claim 126 comprising receiving 
the digital content in an encrypted form and receiving the digital license including a 
decryption key that decrypts the encrypted digital content, the decryption key being 
encrypted according to the black box public key. 

140. (Once Amended) The method of claim 126 wherein the black 
box includes a certifying authority signature as provided by an approved certifying 
authority, and wherein requesting a digital license comprises including the certifying 
authority signature, the license server determining prior to issuance of the license 
whether the certifying authority signature is valid. 

141. (Once Amended) The method of claim 126 wherein the issued 
digital license includes a description of the rights conferred by the license, and further 
comprising: 
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